Images

26 images

Gateway images

Hardened container images in the gateway category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
image v1.15.10
GatewaystandardApache-2.0
0 CVE
jetty
Eclipse Jetty, the lightweight Java web server and servlet container (Jakarta EE 10 on 12.0, EE 11 on 12.1), from the official jetty-home…
image v12.0.40, 12.1.14
GatewaystandardEPL-2.0 OR Apache-2.0
0 CVE
kgateway
kgateway, the CNCF Gateway API control plane that succeeded Gloo Edge. Watches Gateway, HTTPRoute, GRPCRoute and its own gateway.kgateway.dev policy…
image v2.3.10, 2.4.6
GatewaystandardApache-2.0
0 CVE
kgateway-envoy
The kgateway data plane, upstream's envoy-wrapper rebuilt clean-room: the QuenchWorks hardened Wolfi Envoy binary plus kgateway's own envoyinit shim,…
image v2.4.6, 2.3.10
GatewaystandardApache-2.0
0 CVE
kong
API gateway and ingress controller on a patched OpenResty, with routing, auth, rate limiting, and a plugin ecosystem. Built from source against…
image v3.9.3
GatewaystandardApache-2.0
0 CVE
krakend
Stateless, declarative API gateway that aggregates and transforms backend responses from a single JSON config. Built from the community…
image v2.13.11, 3.0.0
GatewaystandardApache-2.0
0 CVE
nginx
High-performance web server, reverse proxy, and load balancer for serving static content and fronting application backends.
image v1.28.3, 1.26.3, 1.30.5
GatewaycriticalBSD-2-Clause
0 CVE
nginx-gateway-fabric
NGINX Gateway Fabric control plane: the F5/NGINX Gateway API implementation. Watches GatewayClass, Gateway, HTTPRoute and its own gateway.nginx.org…
image v2.7.2
GatewaystandardApache-2.0
0 CVE
nginx-gateway-fabric-nginx
NGINX Gateway Fabric data plane: nginx built from source with the njs dynamic module, NGF's own njs scripts and base configs, and nginx-agent v3…
image v2.7.2
GatewaystandardBSD-2-Clause AND Apache-2.0
0 CVE
openresty
OpenResty, nginx with LuaJIT and the lua-nginx-module set for scriptable proxies and web apps. Built from source on Wolfi against the system OpenSSL,…
image v1.31.1.1, 1.29.2.5
GatewaystandardBSD-2-Clause
0 CVE
tomcat
Apache Tomcat, the widely used open-source Java servlet container and web/application server for running Jakarta Servlet, JSP, and WebSocket web…
image v11.0.26
GatewaycriticalApache-2.0
0 CVE
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
image v3.7.14
GatewaystandardMIT